Oval Definition:	oval:org.mitre.oval:def:28950
Revision Date: 2015-12-22 Version: 22 Title: Windows forms elevation of privilege vulnerability - CVE-2015-1673 (MS15-048) Description: The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2015-1673 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Product(s): Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 4.5 Microsoft .NET Framework 4.5.1 Microsoft .NET Framework 4.5.2 Definition Synopsis .NET 1.1 and vulnerable file Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft .NET Framework 1.1 Service Pack 1 is Installed AND Check if the version of mscorlib.dll is less than 1.1.4322.2512 OR .NET 2.0 and XP / server 2003 Either OS Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed AND Microsoft .NET Framework 2.0 Service Pack 2 is installed AND gdr and ldr range ldr range Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8655 AND Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.8600 OR Check if the version of System.Windows.Forms.dll is less than 2.0.50727.3667 OR .NET 2.0 and Vista / 2008 Either OS Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft .NET Framework 2.0 Service Pack 2 is installed AND gdr and ldr range ldr range Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8653 AND Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.8600 OR Check if the version of System.Windows.Forms.dll is less than 2.0.50727.4257 OR .NET 3.5 and Win 8 / server 2012 Either OS Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Microsoft .NET Framework 3.5 SP1 is installed AND gdr and ldr range ldr range Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8653 AND Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.8600 OR Check if the version of System.Windows.Forms.dll is less than 2.0.50727.6427 OR .NET and Win 8.1 / 2012 R2 Either OS Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Microsoft .NET Framework 3.5 SP1 is installed AND gdr and ldr range ldr range Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8653 AND Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.8600 OR Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8015 OR .NET 3.5.1 and Win 7 / Server 2008 R2 either os Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft .NET Framework 3.5 SP1 is installed AND gdr and ldr range ldr range Check if the version of System.Windows.Forms.dll is less than 2.0.50727.8653 AND Check if the version of System.Windows.Forms.dll is greater than or equal to 2.0.50727.8600 OR Check if the version of System.Windows.Forms.dll is less than 2.0.50727.5491 OR .NET 4.0 either os Microsoft Windows Server 2003 (32-bit) is installed OR Microsoft Windows Server 2003 (x64) is installed OR Microsoft Windows Server 2003 (ia64) Gold is installed OR Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft .NET Framework 4.0 is installed AND gdr and ldr range ldr range Check if the version of system.windows.forms.dll is less than 4.0.30319.2057 AND Check if version of System.Windows.Forms.dll is greater than or equal to 4.0.30319.2000 OR Check if the version of system.windows.forms.dll is less than 4.0.30319.1032 OR .NET 4.5/4.5.1 and Win Vista / Win 7 / server 2008 / Server 2008 R2 either os Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed AND Either .Net 4.5 / 4.5.1 / 4.5.2 and version Microsoft .NET Framework 4.5 is installed OR Microsoft .NET Framework 4.5.1 is installed OR Microsoft .NET Framework 4.5.2 is installed AND Either file version ldr range Check if the version of system.windows.forms.dll is less than 4.0.30319.36287 AND Check if the version of system.windows.forms.dll is greater than or equal to 4.0.30319.36000 OR Check if the version of system.windows.forms.dll is less than 4.0.30319.34251 OR .NET and Win 8 /Server 2012 either os Microsoft Windows 8 (x64) is installed OR Microsoft Windows 8 (x86) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Either .Net 4.5 / 4.5.1 / 4.5.2 and version Microsoft .NET Framework 4.5 is installed OR Microsoft .NET Framework 4.5.1 is installed OR Microsoft .NET Framework 4.5.2 is installed AND Either file version ldr range Check if the version of system.windows.forms.dll is less than 4.0.30319.36286 AND Check if the version of system.windows.forms.dll is greater than or equal to 4.0.30319.36000 OR Check if the version of system.windows.forms.dll is less than 4.0.30319.34250 OR .NET 4.5.1 / 4.5.2 and Win 8.1 / Server 2012 R2 Either .Net 4.5.1 / 4.5.2 version Microsoft .NET Framework 4.5.1 is installed OR Microsoft .NET Framework 4.5.2 is installed AND Either OS Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Either file version ldr range Check if the version of system.windows.forms.dll is less than 4.0.30319.36286 AND Check if the version of system.windows.forms.dll is greater than or equal to 4.0.30319.36000 OR Check if the version of system.windows.forms.dll is less than 4.0.30319.34250
BACK